$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: 3PK/ybeJf9zLMTpZB0+pzB+zAUNqPQ60BXOSku5OjV8= Subject key identifier: 24:F3:E1:EF:E7:AB:04:9F:A7:71:F4:57:27:8B:E6:E7:FA:50:27:C0 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: CC Signing time: Sat 23 Aug 2025 05:53:12 +0000 Manifest this update: Sat 23 Aug 2025 05:53:11 +0000 Manifest next update: Sat 30 Aug 2025 05:53:11 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: ZduZ3Y6ca5J37NMboxrxhVboM0ihjiH/9dnoACvYfHQ=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 0zbBkZ62dr/yZQO3asP9YyQ8MW3j8nW078S8WtIQO9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: Aug 23 05:53:11 2025 GMT Not After : Aug 30 05:53:11 2025 GMT Subject: CN=68a95747-1772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:b8:7a:a2:97:d1:d9:f1:54:59:38:7d:b9: 67:b5:f0:f3:b3:cf:a1:c5:6c:4f:ac:d6:9f:17:05: b3:3d:05:99:85:94:48:f3:86:69:00:bd:8b:de:2e: 4f:b9:6d:19:3a:0b:f5:b5:f5:23:47:c6:2b:e3:29: 62:c8:84:76:4a:e6:3f:9e:8d:29:6e:75:eb:1f:97: 4b:07:26:71:6a:d3:5c:c2:73:d4:35:1b:61:08:38: 3a:f1:26:19:cc:7a:9a:93:23:d0:02:3a:7e:2e:1e: cd:9a:86:5e:83:0d:03:90:63:fe:f4:5d:27:4c:09: 59:ad:99:81:da:a1:97:ae:20:48:97:7a:8a:6d:18: 19:84:08:32:9d:69:57:fa:64:69:3e:60:93:00:b7: af:cc:17:fd:6c:08:a7:cc:cb:b3:36:58:43:3e:d3: a3:13:5a:c5:0c:6b:de:cf:9f:6d:91:f3:25:cc:ee: 09:02:40:48:b6:1d:e8:74:f1:e1:0d:74:0c:79:8a: e3:cc:88:51:98:db:a8:5b:d3:62:d5:37:5d:89:fb: 36:68:29:07:b6:61:09:14:e4:e6:db:a9:71:58:6a: fd:b0:8d:b6:80:8d:ef:e7:96:e0:63:65:33:96:56: e5:59:b6:4b:c3:87:4f:de:43:58:89:d3:e5:40:1c: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F3:E1:EF:E7:AB:04:9F:A7:71:F4:57:27:8B:E6:E7:FA:50:27:C0 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a8:ce:ba:11:f2:0a:6f:fb:7d:a2:fb:0c:b8:04:34:6f:5d: 4f:33:df:1c:14:e0:55:c0:f8:87:6d:d0:25:60:24:bf:5a:a1: d3:42:ed:f1:b8:29:b6:68:2a:55:16:e6:6a:b6:bd:8a:ca:be: c0:4f:d6:bd:39:27:3b:e2:5e:f7:04:5b:09:36:a7:e5:f1:ae: 3d:51:57:1b:de:10:79:b1:4b:dc:23:de:5d:c5:2c:f1:8b:2e: 3e:d9:56:8d:b2:b3:99:7d:2c:78:0e:49:5b:56:fc:33:7a:e5: e9:37:7d:ff:f3:ea:a6:af:4a:33:42:88:f4:53:5e:31:6f:5a: c8:fd:5d:5d:75:d3:e2:c2:dc:ef:bb:3a:48:52:a9:2e:43:74: 94:9d:e4:45:5a:a0:56:06:46:3c:37:84:7e:49:72:cf:59:94: 68:d5:16:fd:31:29:9e:bc:98:2a:58:ae:e9:18:50:ba:6c:4d: 1e:b6:eb:94:37:e8:de:ef:d8:f1:c5:0f:cf:4b:82:b4:53:d3: 6f:f0:83:8c:70:08:b1:88:ac:11:2c:4e:e3:d1:fe:ef:93:ca: dd:93:ac:e2:c6:c3:4c:4e:6d:d0:88:9b:09:25:99:38:f3:cd: f6:92:43:b5:e8:b0:9a:99:54:3c:2e:ac:27:6d:22:ab:ee:7f: 0d:e4:e9:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUwODIzMDU1MzExWhcNMjUwODMwMDU1MzExWjAYMRYwFAYD VQQDEw02OGE5NTc0Ny0xNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqy4eqKX0dnxVFk4fblntfDzs8+hxWxPrNafFwWzPQWZhZRI84ZpAL2L3i5P uW0ZOgv1tfUjR8Yr4yliyIR2SuY/no0pbnXrH5dLByZxatNcwnPUNRthCDg68SYZ zHqakyPQAjp+Lh7NmoZegw0DkGP+9F0nTAlZrZmB2qGXriBIl3qKbRgZhAgynWlX +mRpPmCTALevzBf9bAinzMuzNlhDPtOjE1rFDGvez59tkfMlzO4JAkBIth3odPHh DXQMeYrjzIhRmNuoW9Ni1Tddifs2aCkHtmEJFOTm26lxWGr9sI22gI3v55bgY2Uz llblWbZLw4dP3kNYidPlQByGkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTz4e/n qwSfp3H0VyeL5uf6UCfAMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7qM66EfIKb/t9ovsMuAQ0b11PM98cFOBVwPiHbdAlYCS/WqHTQu3x uCm2aCpVFuZqtr2Kyr7AT9a9OSc74l73BFsJNqfl8a49UVcb3hB5sUvcI95dxSzx iy4+2VaNsrOZfSx4DklbVvwzeuXpN33/8+qmr0ozQoj0U14xb1rI/V1dddPiwtzv uzpIUqkuQ3SUneRFWqBWBkY8N4R+SXLPWZRo1Rb9MSmevJgqWK7pGFC6bE0etuuU N+je79jxxQ/PS4K0U9Nv8IOMcAixiKwRLE7j0f7vk8rdk6zixsNMTm3QiJsJJZk4 8832kkO16LCamVQ8LqwnbSKr7n8N5Oln -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:26 2025 by rpki-client